Report Overview

  1. Submitted URL

    finishstrand.top/ziraat-lllv2/tb.php?es=rt1675550507396

  2. IP

    104.21.6.13

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2023-02-04 22:47:14

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    4

  3. Threat Detection Systems

    10

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
cdn.jsdelivr.cc3235082021-04-12T04:06:51Z2023-03-13T05:43:19Z
www.googletagmanager.com752013-05-22T04:07:37Z2023-03-13T08:28:24Z
uprimp.com2168732019-02-11T09:10:06Z2023-03-13T05:43:19Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
hakivz.cyouunknown2021-09-12T07:12:35Z2023-02-06T00:17:25Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
e1.o.lencr.org61592021-08-20T09:36:30Z2023-03-13T05:21:46Z
263cdn.comunknown2022-06-15T23:39:15Z2023-03-13T05:44:33Z
region1.google-analytics.comunknown2022-03-17T12:26:33Z2023-03-13T05:09:18Z
ocsp.globalsign.com20752012-07-20T19:46:16Z2023-03-13T05:09:19Z
fonts.googleapis.com88772013-06-10T22:14:26Z2023-03-13T08:14:31Z
1.bp.blogspot.com84032012-05-21T15:44:19Z2023-03-13T08:43:54Z
cdn.jsdelivr.net4392012-09-30T02:15:09Z2023-03-13T06:17:54Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
hm.baidu.com82542012-05-26T10:38:45Z2023-03-13T05:32:36Z
bonepa.com9058592021-05-30T07:45:50Z2023-03-13T05:43:19Z
aff-a.advertica-cdn.comunknown2017-01-29T12:40:33Z2023-03-13T05:44:35Z
finishstrand.topunknown2022-11-12T04:08:50Z2023-01-10T20:44:16Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
mediumClient IP 104.21.6.13
mediumClient IPInternal IP
mediumClient IPInternal IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumfinishstrand.top/ziraat-lllv2/tb.php?es=rt1675550507396Phishing
mediumfinishstrand.top/j/og2.js?_t=1675550861191Phishing
mediumhakivz.cyou/uRf47cez/ziraat-lllv2/?_t=1675550861383Phishing
mediumbonepa.com/js/responsive.jsPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumhakivz.cyouSinkholed

ThreatFox

No alerts detected


JavaScript (25)

HTTP Transactions (95)

URLIPResponseSize
finishstrand.top/ziraat-lllv2/tb.php?es=rt1675550507396
104.21.6.13200 OK576 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
finishstrand.top/favicon.ico
104.21.6.13200 OK455 B
finishstrand.top/j/og2.js?_t=1675550861191
104.21.6.13200 OK942 B
finishstrand.top/j/og2.php?_t=1675550861294
104.21.6.13200 OK101 B
ocsp.pki.goog/s/gts1p5/lUBhjpg2Mlo
142.250.74.131200 OK472 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
ocsp.pki.goog/s/gts1p5/lUBhjpg2Mlo
142.250.74.131200 OK472 B
cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css
151.101.65.229200 OK21 kB
cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css
151.101.65.229200 OK2.2 kB
cdn.jsdelivr.cc/npm/lazyload@2.0.0-rc.2/lazyload.min.js
172.67.152.134200 OK2.5 kB
cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
172.67.152.134200 OK8.1 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
www.googletagmanager.com/gtag/js?id=G-0C230YDF7G
142.250.74.168200 OK77 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
1.bp.blogspot.com/-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png
142.250.74.161200 OK14 kB
www.googletagmanager.com/gtag/js?id=G-LW7434MYMN
142.250.74.168200 OK77 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js
172.67.152.134200 OK17 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
1.bp.blogspot.com/-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png
142.250.74.161200 OK181 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
push.services.mozilla.com/
52.89.44.161101 Switching Protocols0 B
e1.o.lencr.org/
95.101.11.115200 OK345 B
e1.o.lencr.org/
95.101.11.115200 OK345 B
e1.o.lencr.org/
95.101.11.115200 OK345 B
e1.o.lencr.org/
95.101.11.115200 OK345 B
263cdn.com/upload/yhde8.jpg
104.21.235.74200 OK7.9 kB
cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
172.67.152.134200 OK25 kB
263cdn.com/upload/yhde6.jpg
104.21.235.74200 OK9.0 kB
263cdn.com/upload/yhde2.jpg
104.21.235.74200 OK7.5 kB
263cdn.com/upload/yhde3.jpg
104.21.235.74200 OK8.4 kB
263cdn.com/upload/yhde1.jpg
104.21.235.74200 OK13 kB
263cdn.com/upload/yhde5.jpg
104.21.235.74200 OK8.0 kB
263cdn.com/upload/yhde4.jpg
104.21.235.74200 OK8.5 kB
263cdn.com/upload/yhde9.jpg
104.21.235.74200 OK9.2 kB
263cdn.com/upload/yhde7.jpg
104.21.235.74200 OK7.2 kB
263cdn.com/upload/yhde.jpg
104.21.235.74200 OK12 kB
263cdn.com/upload/ziraatbank.box2.png
104.21.235.74200 OK8.0 kB
263cdn.com/upload/ziraatbank.zhu.jpg
104.21.235.74200 OK63 kB
263cdn.com/upload/ziraatbank.yy.jpg
104.21.235.74200 OK2.3 kB
e1.o.lencr.org/
95.101.11.115200 OK345 B
263cdn.com/upload/ziraatbank.box3.png
104.21.235.74200 OK44 kB
263cdn.com/upload/ziraatbank.box1.png
104.21.235.74200 OK36 kB
263cdn.com/upload/ziraatbank.zz.jpg
104.21.235.74200 OK23 kB
region1.google-analytics.com/g/collect?v=2&tid=G-LW7434MYMN&gtm=45je3210&_p=1518293435&cid=1426250171.1675550862&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675550862&sct=1&seg=0&dl=https%3A%2F%2Fhakivz.cyou%2FuRf47cez%2Fziraat-lllv2%2F%3F_t%3D1675550861383&dr=http%3A%2F%2Ffinishstrand.top%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.34.36204 No Content437 B
region1.google-analytics.com/g/collect?v=2&tid=G-0C230YDF7G&gtm=45je3210&_p=1518293435&cid=1426250171.1675550862&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675550862&sct=1&seg=0&dl=https%3A%2F%2Fhakivz.cyou%2FuRf47cez%2Fziraat-lllv2%2F%3F_t%3D1675550861383&dr=http%3A%2F%2Ffinishstrand.top%2F&dt=&en=page_view&_fv=1&_ss=1&_ee=1
216.239.34.36204 No Content0 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3f52758-d976-47aa-a47d-f0d6026514dc.jpeg
34.120.237.76200 OK7.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg
34.120.237.76200 OK9.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a38348b-ed70-4e2f-80ce-d13e44fefcfc.webp
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg
34.120.237.76200 OK5.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a85f9ff-45f7-4467-9bcf-99adfc764c87.jpeg
34.120.237.76200 OK4.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg
34.120.237.76200 OK6.2 kB
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK1.4 kB
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK1.4 kB
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK1.4 kB
hm.baidu.com/hm.js?cbd698692c53171c6c428d2377f1c130
103.235.46.191200 OK11 kB
hm.baidu.com/hm.js?8b68846a3ac1709b0ec7199084ee5ea8
103.235.46.191200 OK11 kB
hm.baidu.com/hm.js?9e84975b629767c58a8becc81600bb23
103.235.46.191200 OK11 kB
hm.baidu.com/hm.js?ba99808308e7272d58c43367a11d1204
103.235.46.191200 OK11 kB
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=990890147&si=cbd698692c53171c6c428d2377f1c130&su=http%3A%2F%2Ffinishstrand.top%2F&v=1.3.0&lv=1&sn=17520&r=0&ww=1280&u=https%3A%2F%2Fhakivz.cyou%2FuRf47cez%2Fziraat-lllv2%2F%3F_t%3D1675550861383%231675550862674
103.235.46.191200 OK43 B
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1664709676&si=8b68846a3ac1709b0ec7199084ee5ea8&su=http%3A%2F%2Ffinishstrand.top%2F&v=1.3.0&lv=1&sn=17520&r=0&ww=1280&u=https%3A%2F%2Fhakivz.cyou%2FuRf47cez%2Fziraat-lllv2%2F%3F_t%3D1675550861383%231675550862674
103.235.46.191200 OK43 B
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=209400315&si=9e84975b629767c58a8becc81600bb23&su=http%3A%2F%2Ffinishstrand.top%2F&v=1.3.0&lv=1&sn=17520&r=0&ww=1280&u=https%3A%2F%2Fhakivz.cyou%2FuRf47cez%2Fziraat-lllv2%2F%3F_t%3D1675550861383%231675550862674
103.235.46.191200 OK43 B
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1901964598&si=ba99808308e7272d58c43367a11d1204&su=http%3A%2F%2Ffinishstrand.top%2F&v=1.3.0&lv=1&sn=17520&r=0&ww=1280&u=https%3A%2F%2Fhakivz.cyou%2FuRf47cez%2Fziraat-lllv2%2F%3F_t%3D1675550861383%231675550862674
103.235.46.191200 OK43 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
fonts.googleapis.com/css?family=Catamaran:800&display=swap
142.250.74.106200 OK875 B
uprimp.com/bnr.php?section=General&pub=593174&format=300x50&ga=g
185.66.200.220200 OK930 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js
172.67.152.134200 OK32 kB
r3.o.lencr.org/
95.101.11.115200 OK1.0 kB
bonepa.com/4fe48aebd6/4f59451604/?placementName=Banner&is_first=true&randomA=0_8229&maxw=0
185.66.201.42200 OK0 B
aff-a.advertica-cdn.com/genericImages/breaking-news/tornado.jpg
185.66.200.127200 OK0 B
aff-a.advertica-cdn.com/genericImages/breaking-news/spider.jpg
185.66.200.127200 OK0 B
aff-a.advertica-cdn.com/genericImages/breaking-news/fire.jpg
185.66.200.127200 OK0 B
aff-a.advertica-cdn.com/genericImages/breaking-news/shark.jpg
185.66.200.127200 OK0 B
aff-a.advertica-cdn.com/genericImages/breaking-news/monster.jpg
185.66.200.127200 OK0 B
aff-a.advertica-cdn.com/genericImages/breaking-news/rocket.jpg
185.66.200.127200 OK0 B
hakivz.cyou/uRf47cez/ziraat-lllv2/?_t=1675550861383
104.21.59.197200 OK0 B
aff-a.advertica-cdn.com/genericImages/breaking-news/water.jpg
185.66.200.127200 OK0 B
aff-a.advertica-cdn.com/genericImages/breaking-news/tsunami.jpg
185.66.200.127200 OK0 B
cdn.jsdelivr.cc/npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js
172.67.152.134200 OK0 B
bonepa.com/js/responsive.js
185.66.201.42200 OK0 B
aff-a.advertica-cdn.com/genericImages/breaking-news/unicorn.jpg
185.66.200.127200 OK0 B
aff-a.advertica-cdn.com/genericImages/breaking-news/ufo.jpg
185.66.200.127200 OK0 B